VULNERABILITY INTELLIGENCE

CVE-2023-32484

CVSS score9.8 CRITICAL
EPSS probability0.57%
CISA KEVNot currently listed
Published2024-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

Weakness classification

  • security_alert@emc.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references